Update release workflow and add npm provenance

Author: teneplaysofficial

.github/workflows/weekly-release.yml

@@ -5,6 +5,10 @@ on:
     - cron: '0 0 * * 1'
   workflow_dispatch:
 
+permissions:
+  contents: write
+  id-token: write
+
 jobs:
   check-commits:
     runs-on: ubuntu-latest
@@ -39,6 +43,7 @@ jobs:
         with:
           node-version: 20
           cache: 'yarn'
+          registry-url: 'https://registry.npmjs.org/'
 
       - name: Install dependencies
         run: yarn install --frozen-lockfile

.release-it.json

@@ -8,7 +8,8 @@
     "requireCleanWorkingDir": true
   },
   "npm": {
-    "publish": true
+    "publish": true,
+    "publishArgs": ["--provenance"]
   },
   "github": {
     "release": true,